Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
File: p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft (raw, json)
Hash identifier: XVs4jVdkvWeXlckyoRuSuA0bt+r2Zw0uZtd74xARMN0=
Subject key identifier: 78:3D:EE:6C:26:54:F0:7B:03:C1:1D:25:6A:3A:91:CC:48:BC:7C:85
Authority key identifier: A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
Certificate issuer: /CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Certificate serial: 019CAC46CBA7BFEFF4681B73A54BEFF15530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
Manifest number: 1581
Signing time: Mon 02 Mar 2026 02:00:46 +0000
Manifest this update: Mon 02 Mar 2026 02:00:46 +0000
Manifest next update: Tue 03 Mar 2026 02:00:46 +0000
Files and hashes: 1: p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl (hash: fIlBAHV4YCzZTa92Q8tHI5nYvNQbthMQwr29fomq+n0=)
2: ui7FUzschC45AaandKwrKd4ZLOE.roa (hash: p64p3A+w4Rzd9qzg1tn0C4YDnUbbDXUrufa5/DaN5QU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:cb:a7:bf:ef:f4:68:1b:73:a5:4b:ef:f1:55:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Validity
Not Before: Mar 2 02:00:46 2026 GMT
Not After : Mar 3 02:00:46 2026 GMT
Subject: CN=783dee6c2654f07b03c11d256a3a91cc48bc7c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:b6:59:0e:da:bc:e3:f7:dc:fb:b2:02:f5:
fd:67:66:41:7b:b0:61:5d:36:b6:38:a7:c4:30:da:
c0:74:58:41:29:50:54:92:07:5b:79:70:0d:21:92:
af:64:a1:02:c4:ad:54:14:be:df:37:2d:3b:3b:4b:
fe:ba:7c:27:6c:19:31:72:65:d6:6a:c0:4a:98:25:
7c:14:46:e9:1e:09:bc:93:1d:d5:73:48:7f:7d:4b:
60:f2:b5:61:a6:16:a4:8d:6a:05:af:70:b7:68:03:
b4:3c:92:29:57:21:6e:68:f7:e9:e9:39:12:a4:0f:
e6:4e:ee:7a:fb:c1:ac:b5:73:cd:eb:5e:5e:34:5a:
30:00:64:0e:dd:1b:f1:ba:1b:62:e3:67:4c:07:a9:
e4:a1:e2:96:82:f3:2b:67:78:e8:08:ee:52:78:fc:
00:ac:df:b5:b4:0c:63:89:7b:d7:d4:8d:7e:14:99:
96:f7:42:9a:06:95:35:ff:46:eb:90:5a:83:1b:6c:
97:8a:0c:7b:1e:a9:b8:5c:77:22:3d:43:92:6d:77:
5f:ff:5e:44:70:67:72:6a:5a:75:c5:03:15:d6:0d:
08:45:91:73:f6:ec:f4:d5:6a:ab:0d:4a:e2:8a:2d:
3e:5e:25:6f:27:eb:99:f4:f1:bc:f5:a9:8d:c4:d9:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3D:EE:6C:26:54:F0:7B:03:C1:1D:25:6A:3A:91:CC:48:BC:7C:85
X509v3 Authority Key Identifier:
keyid:A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ba:7c:e1:dc:cd:93:8d:96:b3:53:6a:95:15:bc:16:0b:12:
54:3f:f8:1d:1f:1a:fa:a7:e7:2e:34:42:4b:3d:81:44:12:eb:
c3:63:41:ed:95:aa:3b:e9:6f:ea:50:29:2d:11:fe:a8:ef:d5:
af:bd:91:71:23:77:bf:a4:10:02:d2:3e:86:26:2f:48:cb:70:
95:29:33:59:3e:5c:11:b7:d8:13:64:c4:f0:c0:2b:17:b7:aa:
c0:95:76:fe:01:f2:a6:1c:94:28:30:0c:26:e4:5f:7b:03:c1:
80:f0:ea:e4:92:0d:ed:7e:52:3a:30:57:2d:d2:7a:90:89:e7:
e2:aa:d8:96:34:7b:1c:ef:a5:ec:d1:84:d8:e1:49:74:67:3f:
b7:4c:64:3e:95:24:b7:3c:f3:bc:5a:ca:8f:b7:d3:d2:b9:f6:
1e:d8:43:ea:3a:5c:aa:c3:df:3f:17:fa:81:26:03:42:b5:33:
66:73:da:e8:d4:b1:f3:6b:a1:7f:af:03:69:df:48:3b:2d:f5:
70:a5:c7:46:83:e7:6d:5c:bf:c7:c7:df:71:16:c5:a0:38:58:
d1:ed:7c:66:78:00:da:72:5c:93:64:99:a5:49:21:0b:82:4b:
ff:8d:31:ef:2a:4f:74:5d:85:29:6f:1e:36:80:f4:c6:8c:a4:
b6:3a:95:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:31 2026 by rpki-client